CVE-2026-114110
1 advisory.
PyPI/uv CVE-2026-114110: medium 5.3
uv vulnerable to arbitrary file deletion through RECORD entries
Action: Upgrade uv to 0.11.6 or later.
pip install uv==0.11.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.6 | - |
Fixed versions
| 0.11.6 |
Sources
- osv: GHSA-pjjw-68hj-v9mw
- nvd: CVE-2026-114110
- https://github.com/astral-sh/uv/security/advisories/GHSA-pjjw-68hj-v9mw
- https://github.com/astral-sh/uv/pull/18942
- https://github.com/astral-sh/uv/pull/18943
- https://github.com/astral-sh/uv/commit/7983c7a5bef236fd8a04580fcedae7bd5bde4cdb
- https://github.com/astral-sh/uv/commit/a0e461ac44851f9a0f6e8974733e77d46f7a9ea9
- https://github.com/astral-sh/uv
- https://github.com/astral-sh/uv/releases/tag/0.11.6
CVE-2026-114110 · published · modified · JSON